This update for LibVNCServer fixes the following issues:
CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471).
CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419).
CVE-2019-20788: Fixed a integer overflow and heap-based buffer overflow via a large height or width value (bsc#1170441).
Affected Packages
libvncclient0
SUSE Enterprise Storage 5SUSE Linux Enterprise High Performance Computing 12 SP1SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise High Performance Computing 12 SP4
Fixed in:
0:0.9.9-17.19.1
libvncserver0
SUSE Enterprise Storage 5SUSE Linux Enterprise High Performance Computing 12 SP1SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise High Performance Computing 12 SP4
Fixed in:
0:0.9.9-17.19.1
LibVNCServer-devel
SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5